12,602 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2024:14375-1 1 CVE
kyverno-1.12.6-1.1 on GA media
These are all security issues fixed in the kyverno-1.12.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2024 -
High max 7.5SUSE-SU-2021:2293-1 1 CVE
Security update for jdom2
This update for jdom2 fixes the following issues: - CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446)
first Jul 12, 2021 -
High max 8.1
Security update for tomcat
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2017-5664: A problem in handling error pages was fixed, to avoid potential file overwrites during error page handling. (bsc#1042910). - CVE-2017-7674: A CORS Filter issue could le…
first Dec 13, 2017 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036). - CVE-2023-0590: Fixed …
first Jul 6, 2023 -
High max 7.5SUSE-SU-2022:4197-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: Security issues fixed: - CVE-2022-40617: Fixed that using untrusted URIs for revocation checking could lead to denial of service (bsc#1203556) Feature changes: - Enable Marvell plugin (jsc#SLE-20151)
first Nov 23, 2022 -
High max 7.0openSUSE-SU-2024:14407-1 1 CVE
element-web-1.11.81-1.1 on GA media
These are all security issues fixed in the element-web-1.11.81-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2024 -
High max 7.8SUSE-SU-2022:1223-1 3 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_46 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal use…
first Apr 14, 2022 -
High max 7.4SUSE-SU-2018:2839-1 10 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues: - CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to comp…
first Sep 24, 2018 -
High max 7.5SUSE-SU-2021:14866-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. [bsc#1193662]
first Dec 17, 2021 -
High max 7.8SUSE-SU-2018:2275-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370). - CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash)…
first Aug 9, 2018 -
High max 7.5SUSE-SU-2017:0716-1 1 CVE
Security update for java-1_7_0-ibm
This update for java-1_7_1-ibm fixes the following issues: Security issue fixed: - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billio…
first Mar 17, 2017 -
High max 7.5SUSE-SU-2019:1829-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel version 4.12.14 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: Attackers used to be able to track the Linux kernel by the IP ID values the kernel produces for…
first Jul 12, 2019 -
High max 7.8SUSE-SU-2019:1321-1 3 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: Security issues fixed: - CVE-2016-9189: Fixed a integer overflows leading to memory disclosure in PyImaging_MapBuffer() (bsc#1008845). - CVE-2016-9190: Fixed a code execution vulnerability using a craf…
first May 23, 2019 -
High max 7.5openSUSE-SU-2024:14520-1 1 CVE
opentofu-1.8.6-1.1 on GA media
These are all security issues fixed in the opentofu-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 23, 2024 -
High max 7.5openSUSE-SU-2019:1808-1 2 CVEs
Security update for tomcat
This update for tomcat to version 9.0.21 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames (bsc#1131055). - CVE-2019-0221: Fi…
first Jul 25, 2019 -
High max 7.8SUSE-SU-2024:1292-1 3 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2024-1…
first Apr 15, 2024 -
High max 7.5
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272)
first Nov 6, 2023 -
High max 7.5SUSE-SU-2019:1825-1 1 CVE
Security update for tomcat
This update for tomcat to version 9.0.21 fixes the following issues: Security issue fixed: - CVE-2019-0199: Added additional fixes to address HTTP/2 connection window exhaustion (bsc#1139924).
first Jul 12, 2019 -
High max 7.5openSUSE-SU-2024:12887-1 1 CVE
dnsmasq-2.89-3.1 on GA media
These are all security issues fixed in the dnsmasq-2.89-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
first Jun 3, 2021 -
High max 7.8SUSE-SU-2022:3590-1 1 CVE
Security update for python-Babel
This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal (bsc#1185768).
first Oct 14, 2022 -
High max 7.5openSUSE-SU-2025:14923-1 2 CVEs
docker-stable-24.0.9_ce-8.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-8.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2025 -
High max 8.8SUSE-SU-2024:1858-1 6 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to version 115.11 (bsc#1224056): - CVE-2024-4367: Arbitrary JavaScript execution in PDF.js - CVE-2024-4767: IndexedDB files retained in private browsing mode - CVE-2024-4768: Potential perm…
first May 30, 2024 -
High max 7.5SUSE-SU-2025:3996-1 2 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.29+7 (October 2025 CPU): - CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#125…
first Nov 7, 2025 -
High max 7.8SUSE-SU-2025:02012-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49178: Unproce…
first Jun 18, 2025 -
High max 7.8SUSE-SU-2024:3787-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565).
first Oct 30, 2024 -
High max 8.4SUSE-SU-2024:3921-1 2 CVEs
Security update for libgsf
This update for libgsf fixes the following issues: - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283).
first Nov 6, 2024 -
High max 8.8openSUSE-SU-2024:13777-1 1 CVE
ungoogled-chromium-122.0.6261.128-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-122.0.6261.128-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2017:1473-1 2 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service (bsc#1039514) - CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service (bsc#10395…
first Jun 1, 2017 -
High max 8.4openSUSE-SU-2024:0269-1 3 CVEs
Security update for trivy
trivy was updated to fix the following issues: Update to version 0.54.1: * fix(flag): incorrect behavior for deprected flag `--clear-cache` [backport: release/v0.54] (#7285) * fix(java): Return error when trying to find a remote pom to avoid segfault [backpor…
first Aug 30, 2024 -
High max 7.8SUSE-FU-2023:3413-1 2 CVEs
Feature update for LibreOffice and xmlsec1
This update for LibreOffice and xmlsec1 fixes the following issue: libreoffice: - Version update from 7.4.3.2 to 7.5.4.1 (jsc#PED-3561, jsc#PED-3550, jsc#3549): * For the highlights of changes of version 7.5 please consult the official release notes: https://…
first Aug 24, 2023 -
High max 7.3openSUSE-SU-2019:2058-1 1 CVE
Security update for apache-commons-beanutils
This update for apache-commons-beanutils fixes the following issues: Security issue fixed: - CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available o…
first Sep 2, 2019 -
High max 7.8SUSE-SU-2023:4847-1 1 CVE
Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_147 fixes one issue. The following security issue was fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation…
first Dec 14, 2023 -
High max 7.5SUSE-SU-2021:1979-1 1 CVE
Security update for snakeyaml
This update for snakeyaml fixes the following issues: - Upgrade to 1.28 - CVE-2017-18640: The Alias feature allows entity expansion during a load operation (bsc#1159488, bsc#1186088)
first Jun 15, 2021 -
High max 8.8SUSE-SU-2025:4203-1 4 CVEs
Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP3)
This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.182 fixes various security issues The following security issues were fixed: - CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (bsc#1250295). - CVE-202…
first Nov 24, 2025 -
High max 7.5SUSE-SU-2025:02745-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 client consumption vulnerabilit…
first Aug 11, 2025 -
High max 7.5SUSE-SU-2021:0297-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.8.10 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345) A lot more minor bugs have been fixed with this openvswitch version. Please refer to the …
first Feb 3, 2021 -
High max 7.8SUSE-SU-2025:03329-1 4 CVEs
Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (…
first Sep 24, 2025 -
High max 7.5SUSE-SU-2023:0812-1 4 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to verion 0.1.1674034019.a93ff61 * Install copied wicked config as client.xml (bsc#1205599) - Update to version 0.1.1673279145.e7616bd grafana: - CVE-2022-46146: Fix basic authentication bypass…
first Mar 20, 2023 -
High max 7.8SUSE-SU-2022:1278-1 2 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_88 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user pri…
first Apr 20, 2022